%!TEX root = main.tex
\section{Engineering}
\subsection{Duplicate Update}
Duplicate ADD/REMOVE, we treat it as success instead of failure
For example, Add a existing records, or remove a non-existing records both returns DyNDNS-Update-OK

\subsection{Failure responses to Dig}
for example, no FH found for NS if resolver enables forwarding hint.


\subsection{Delegate}
\emph{Input}
\begin{itemize}
\item Current Working Zone (CWZ), this zone must be also an identity on local Key Chain.
\item Delegated Zone, or sub-zone (SZ).
\item  which could by give by
\item -p CWZ's Certificate -c SZ's KSK
\end{itemize}

\emph{Output}
\begin{itemize}
\item file: sub-zone's KSK's certificate issued by CWZ's DSK
\item NDNS: ID-CERT(ksk-*-PKS.cert), NS(TXT if site), FH (if set)
\end{itemize}

\subsection{Register}
A site/zone must be delegated before it register

\emph{Input}
\begin{itemize}
\item Registered Zone
\item Zone's KSK certificate issued by parent's key (ksk-*-PSK.cert)
\item DSK's self-signed certificate (dsk-*-SS.cert)
\end{itemize}

\emph{Output}
\begin{itemize}
\item SKS certificate: dsk-*-SKS.cert
\item NDNS: ID-CERT (dsk-*-SKS.cert)
\end{itemize}

%%% Local Variables:
%%% mode: latex
%%% TeX-master: "main"
%%% End: